254030 2023-03-16 10:09:49 -0700 REGRESSION (261623@main?): [ iOS, macOS Debug ] ASSERTION FAILED: !isCalculated() in WebCore::Length::value() 2023-03-17 10:03:36 -0700 1 1 1 Unclassified WebKit New Bugs Other Unspecified Unspecified RESOLVED DUPLICATE 254034 InRadar P2 Normal --- 1 bharris9 webkit-unassigned ahmad.saleem792 webkit-bot-watchers-bugzilla webkit-bug-importer zalan oldest_to_newest 1941882 0 bharris9 2023-03-16 10:09:49 -0700 fast/table/calculated-width-on-col-within-colgroup.html is a constant crash on iOS and macOS Debug only. HISTORY: https://results.webkit.org/?suite=layout-tests&test=fast%2Ftable%2Fcalculated-width-on-col-within-colgroup.html Crash Log Text: ASSERTION FAILED: !isCalculated() /Volumes/Data/worker/macOS-AppleSilicon-Ventura-Debug-Build-EWS/build/Source/WebCore/platform/Length.h(341) : float WebCore::Length::value() const 1 0x13a89f2b0 WTFCrash 2 0x28065d6a0 WebCore::JSANGLEInstancedArrays::createPrototype(JSC::VM&, WebCore::JSDOMGlobalObject&) 3 0x28218076c WebCore::Length::value() const 4 0x2857fc288 WebCore::AutoTableLayout::recalcColumn(unsigned int) 5 0x2857fd304 WebCore::AutoTableLayout::fullRecalc() 6 0x2857fd528 WebCore::AutoTableLayout::computeIntrinsicLogicalWidths(WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::TableIntrinsics) 7 0x285b72314 WebCore::RenderTable::computeIntrinsicLogicalWidths(WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::TableIntrinsics) const 8 0x285b7234c WebCore::RenderTable::computeIntrinsicLogicalWidths(WebCore::LayoutUnit&, WebCore::LayoutUnit&) const 9 0x285b72418 WebCore::RenderTable::computePreferredLogicalWidths() 10 0x2859834b8 WebCore::RenderBox::maxPreferredLogicalWidth() const 11 0x285b6dd2c WebCore::RenderTable::updateLogicalWidth() 12 0x285b6f3cc WebCore::RenderTable::layout() 13 0x285920518 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 14 0x28591f9f8 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 15 0x28591e3c8 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 16 0x28591d774 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 17 0x285906578 WebCore::RenderBlock::layout() 18 0x285920518 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 19 0x28591f9f8 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 20 0x28591e3c8 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 21 0x28591d774 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 22 0x285906578 WebCore::RenderBlock::layout() 23 0x285920518 WebCore::RenderBlockFlow::layoutBlockChild(WebCore::RenderBox&, WebCore::RenderBlockFlow::MarginInfo&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 24 0x28591f9f8 WebCore::RenderBlockFlow::layoutBlockChildren(bool, WebCore::LayoutUnit&) 25 0x28591e3c8 WebCore::RenderBlockFlow::layoutInFlowChildren(bool, WebCore::LayoutUnit&, WebCore::LayoutUnit&, WebCore::LayoutUnit&) 26 0x28591d774 WebCore::RenderBlockFlow::layoutBlock(bool, WebCore::LayoutUnit) 27 0x285906578 WebCore::RenderBlock::layout() 28 0x285be8d40 WebCore::RenderView::layout() 29 0x284c7f140 WebCore::FrameViewLayoutContext::performLayout() 30 0x284c7ea54 WebCore::FrameViewLayoutContext::layout() 31 0x283bbd624 WebCore::Document::updateLayout() com.apple.WebKit.WebContent.Development terminated (pid 2071) for reason: crash LEAK: 1 WebPageProxy 1941883 1 bharris9 2023-03-16 10:10:59 -0700 I was able to replicate this crash on Ventura ToT and iOS 16 ToT as follows: run-webkit-tests --root fast/table/calculated-width-on-col-within-colgroup.html --force 1941884 2 webkit-bug-importer 2023-03-16 10:11:18 -0700 <rdar://problem/106813623> 1941910 3 ews-feeder 2023-03-16 11:03:52 -0700 Test gardening commit 261754@main (b56022040d48): <https://commits.webkit.org/261754@main> Reviewed commits have been landed. Closing PR #11615 and removing active labels. 1942120 4 ryanhaddad 2023-03-17 10:01:36 -0700 This test was added with https://commits.webkit.org/261623@main, the test has been asserting from the start. 1942122 5 ryanhaddad 2023-03-17 10:01:45 -0700 *** Bug 254034 has been marked as a duplicate of this bug. *** 1942124 6 ryanhaddad 2023-03-17 10:03:36 -0700 Duping the other way. *** This bug has been marked as a duplicate of bug 254034 ***